Privacy Policy
Last updated: April 2025
Klasstack Technologies Ltd (“Klasstack”, “we”, “us”) operates the Klasstack school management platform. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our services.
1. Information we collect
Account and school data
When a school registers on Klasstack, we collect the school name, address, contact details, and administrator account information (name, email, phone number).
Student and staff records
Schools input student and staff information including names, dates of birth, contact details, academic records, attendance, and fee history. This data is controlled by the school and processed by Klasstack on the school's behalf.
Usage data
We collect log data (IP addresses, browser type, pages visited, timestamps) and device information to maintain and improve the service.
Payment data
Fee payments made through Klasstack are processed by Paystack. We do not store card numbers or bank account credentials. We receive transaction confirmations and payment metadata.
2. How we use your information
- To provide, maintain, and improve the Klasstack platform.
- To send service-related communications (account alerts, security notices).
- To process fee payments on behalf of schools.
- To analyse aggregate usage patterns and improve product features.
- To comply with legal obligations.
We do not sell personal data to third parties. We do not use student data for advertising purposes.
3. Data sharing
We share data only with:
- Service providers, infrastructure, payment processing, email delivery, under strict data processing agreements.
- School administrators, who have legitimate access to their own school's records.
- Law enforcement, when required by Nigerian law or a valid court order.
4. Data storage and security
All data is stored on servers in compliant data centres. Data is encrypted in transit using TLS 1.3 and at rest using AES-256. We conduct regular security reviews and penetration tests. Access to production data is restricted to authorised personnel on a need-to-know basis.
5. Data retention
We retain school and student data for the duration of the subscription and for 90 days after cancellation, after which it is permanently deleted. Schools may export a full data archive at any time from Settings → Export.
6. Your rights
School administrators may access, update, or delete their school's data at any time via the admin dashboard. For requests relating to personal data held about you, contact us at privacy@klasstack.com. We will respond within 14 business days.
7. Children's data
Klasstack processes children's data (student records) under the instruction and responsibility of the school. Schools are responsible for obtaining any parental consents required under applicable law before entering student data into the platform.
8. Changes to this policy
We may update this policy from time to time. We will notify school administrators by email at least 14 days before any material changes take effect. Continued use of the service after the effective date constitutes acceptance of the updated policy.
9. Contact
Questions about this policy? Email privacy@klasstack.com or write to:
Klasstack Technologies Ltd, Lagos, Nigeria.